Ping Identity Certified Professional - PingAccess - PAP-001 Exam Practice Test

An administrator needs to reduce the number of archive backups that are maintained in thedata/archivefolder.
Which file does the administrator need to modify to make this change?

An API is hosted onsite and is using only header-based Identity Mapping. It is exposed to all clients running on the corporate network. How should the administrator prevent a malicious actor from bypassing PingAccess and spoofing the headers to gain unauthorized access to the API?

All access requests to the existing/adminresource must be captured in the audit log. How should this be accomplished?

Where in the administrative console should an administrator make user attributes available as HTTP request headers?

A company has removed the requirement to record back-channel requests from PingAccess to PingFederate in the audit log.
Where should the administrator update this behavior without affecting existing applications?

Any user who accesses an application must be insalesunless the user is amanager in the marketing department. The administrator creates the following web session rules:
* (A) Look for department = sales
* (B) Look for department = marketing
* (C) Look for job_title = manager
Which additional actions should be taken to properly enforce this requirement?

Where should an administrator adjustSameSite Cookiesettings?

An administrator configures PingAccess to use PingFederate as the token provider. Which benefit does this provide?